Greetings If you were to examine your flows, you should see quite a bit of UDP/53 response traffic right now targeting: AS | IP | AS Name 23393 | 76.9.31.42 | ISPRIME - ISPrime, Inc. Anyone for traceback? GW 855 - Bell Aliant